Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/J7gFHNst-19CENBbt69T70jxjB8.roa
File: J7gFHNst-19CENBbt69T70jxjB8.roa (raw, json)
Hash identifier: 0rXJucwoLc7aLIrMSn3PnG+fx1J6SFzWBj9++34tyzY=
Subject key identifier: 27:B8:05:1C:DB:2D:FB:5F:42:10:D0:5B:B7:AF:53:EF:48:F1:8C:1F
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 188A
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/J7gFHNst-19CENBbt69T70jxjB8.roa
Signing time: Fri 17 Jan 2025 01:25:12 +0000
ROA not before: Fri 17 Jan 2025 01:25:12 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6282 (0x188a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:12 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=27B8051CDB2DFB5F4210D05BB7AF53EF48F18C1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:05:b7:5e:4d:ce:e1:32:4c:60:10:1d:1e:
b4:d8:25:5b:d3:1e:25:21:dd:c0:2d:5b:0b:f6:c8:
ca:58:8a:94:0d:56:e6:23:38:cf:3e:f6:f7:57:25:
49:e5:32:49:4c:1d:12:b5:e4:98:91:49:55:24:b3:
00:d8:23:e6:fc:12:d6:69:05:c2:74:dd:e2:9d:54:
b4:01:58:54:f9:f1:db:5c:12:4c:89:e4:06:0a:04:
38:73:8e:1c:69:b9:9b:1a:9b:84:5f:39:8b:f4:cf:
10:0d:ff:5b:ab:df:67:63:78:ed:cb:69:3d:ff:70:
bd:73:de:40:68:71:9c:fa:17:d0:8d:c0:56:b2:f5:
8a:c1:d3:00:0f:d7:92:e4:a3:15:8b:d9:70:cc:b2:
f1:16:da:de:e2:d4:8d:f0:84:e0:de:62:df:10:8e:
29:d2:41:d7:7f:3d:ea:4d:88:e1:db:3e:8f:7f:8f:
1a:81:10:4b:fb:c8:e8:54:3f:00:c8:80:59:bf:17:
6a:bf:9c:aa:bc:6d:e7:3d:ad:f6:57:b9:40:df:d7:
8c:3d:12:f4:96:de:da:9b:2c:9d:7a:da:57:60:3c:
cc:49:2d:37:a5:4e:bc:61:95:04:4e:41:24:9e:e0:
84:91:33:9f:c8:56:4c:f0:d7:bd:be:9e:16:b4:7b:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B8:05:1C:DB:2D:FB:5F:42:10:D0:5B:B7:AF:53:EF:48:F1:8C:1F
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/J7gFHNst-19CENBbt69T70jxjB8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.46.0/24
Signature Algorithm: sha256WithRSAEncryption
db:e1:85:1b:bc:df:c9:d1:38:2b:a8:d4:da:07:2b:a7:38:01:
f7:52:23:de:2f:64:ef:75:5f:15:15:e5:eb:df:48:a9:5a:62:
47:1c:84:c7:45:d3:18:3a:f1:9f:73:4f:b3:ff:86:bd:d3:5a:
a4:5a:6c:95:80:27:eb:51:ce:37:3f:cb:8a:55:75:ea:fc:3c:
32:eb:f5:f2:cf:2a:55:4e:23:13:6c:5c:46:5a:14:0f:06:64:
87:66:72:a8:e5:e4:95:dc:1a:e3:c6:da:1b:98:8e:f0:44:19:
b4:a3:21:63:01:9d:3e:32:a0:ef:87:cd:07:e6:fd:25:de:b1:
50:56:1d:f8:97:63:08:65:d5:57:0f:47:bb:1f:c7:b4:06:e4:
c7:4c:62:c3:8b:88:20:fc:30:b1:14:96:84:b5:d3:2f:86:54:
c6:37:70:22:cb:a9:6a:c9:37:b6:7c:0b:50:5f:28:09:e9:af:
a7:91:9a:0f:a7:e0:e1:1c:5d:87:e1:99:7b:48:8a:5c:21:3c:
ac:5d:5e:c3:be:c2:fc:d0:0a:5f:ea:f6:de:35:cf:d9:7e:fb:
eb:8c:e5:1b:98:bc:82:32:1b:83:3c:80:9e:72:f0:01:89:4e:
b3:7a:4b:4c:54:42:bf:03:3b:43:cf:c2:1a:af:30:b7:2f:4c:
08:32:e9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:48:37 2025 by rpki-client